CVE-2026-72452

A flaw was found in the drm/i915 component of the Linux kernel. The intel_crtc_put_color_blobs() function drops references to CRTC color blobs but does not clear the corresponding pointers. This can lead to a double-free vulnerability if the intel_crtc_free_hw_state() function is called multiple times for the same hardware state, potentially causing system instability or a denial of service.

This vulnerability is rated as Moderate severity because exploitation requires local access, physical or virtualized Intel graphics hardware, and the occurrence of an uncommon error condition during display state configuration. In typical Red Hat Enterprise Linux server deployments, systems frequently run headless without Intel display adapters, significantly limiting exposure. When affected hardware is present, an authenticated local user interacting with the direct rendering manager interface could trigger atomic modesetting failure paths, resulting in memory corruption or local denial of service via a kernel crash.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.